Privacy Policy

Effective Date: August 22, 2026
Last Updated: August 22, 2026

GLK Construction Management & Consulting LLC (“GLK,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit www.glkcmc.com or another GLK webpage that links to this Policy (collectively, the “Site”), contact us, purchase an advisory report or other service, upload project materials, or otherwise interact with us.

GLK is established in Florida, United States. Our business location is Lutz, Florida, and we serve clients in the United States and internationally. Unless another party is identified as the controller for a particular activity, GLK determines why and how personal information covered by this Policy is processed.

This Policy does not replace a project-specific agreement, statement of work, or data processing agreement. If GLK processes personal information solely on behalf of a business client, the client may be the controller or business and GLK may act as its processor or service provider. In that situation, the client’s privacy notice and our agreement with that client may govern the processing.

1. Personal Information We Collect

The information we collect depends on how you interact with us.

A. Information you provide

• Identity and contact information: name, company, title, mailing address, email address, telephone number, and communication preferences.
• Inquiry and relationship information: project descriptions, service interests, appointment details, correspondence, customer-support requests, and notes about our relationship with you.
• Account and transaction information: order details, selected service, billing address, transaction status, invoices, refunds, tax information, and related records. Payment-card information is processed by our payment provider. GLK does not intend to store full payment-card numbers on its own systems.
• Client and project materials: plans, specifications, budgets, schedules, estimates, contracts, photographs, reports, property information, vendor or contractor information, and other files or information you choose to provide.
• Marketing information: newsletter or event registrations, survey responses, campaign interactions, and email or SMS preferences when those features are offered.
• Rights-request information: the content of a privacy request and information reasonably needed to verify identity or authority.

B. Information collected automatically

When you use the Site, GLK and its technology providers may collect:

• IP address, browser type, device type, operating system, language, and approximate location derived from IP address;
• pages viewed, links clicked, referring and exit pages, dates and times, session information, and interactions with Site features;
• cookie identifiers, advertising identifiers, and similar online identifiers;
• diagnostic, security, fraud-prevention, and error information; and
• consent choices and marketing attribution information.

See our Cookie Notice for more information.

C. Information from other sources

We may receive information from:

• a company, project owner, homeowner, investor, representative, advisor, or other person who asks us to communicate or work with you;
• payment, hosting, communications, scheduling, analytics, advertising, identity-verification, security, and other service providers;
• public records, property records, professional directories, project websites, social media, and other publicly available sources; and
• referral partners, consultants, and professional advisors, where permitted by law.

If you provide personal information about another person, you represent that you are authorized to provide it and have given any notice or obtained any consent required by law.

2. How We Use Personal Information

We may use personal information to:

• respond to inquiries, schedule communications, and provide requested information;
• evaluate, accept, administer, and perform engagements;
• prepare advisory reports and other deliverables;
• verify instructions, communicate about projects, and provide support;
• process orders, payments, refunds, taxes, and accounting records;
• personalize, operate, maintain, troubleshoot, and improve the Site and our services;
• measure Site performance and understand how visitors use our content;
• send administrative messages and, with any consent required by law, marketing communications;
• detect, investigate, and prevent fraud, misuse, security incidents, and unlawful activity;
• protect GLK, our clients, users, and others; enforce agreements; and establish, exercise, or defend legal claims;
• comply with law, court orders, professional obligations, tax requirements, sanctions and export-control requirements, and lawful government requests;
• conduct due diligence or support a merger, financing, acquisition, reorganization, or transfer of some or all of our business; and
• carry out another purpose disclosed when the information is collected or with your direction or consent.

Where a law requires a legal basis, our bases may include: taking steps at your request before entering a contract; performing a contract; complying with law; protecting vital interests; pursuing legitimate interests that are not overridden by your rights; and consent. Our legitimate interests may include operating and securing our business, communicating with clients and prospective clients, improving services, preventing fraud, and asserting or defending legal claims.

3. AI-Assisted Tools

GLK may use approved artificial-intelligence-enabled tools to assist with tasks such as organizing information, extracting or comparing text, summarizing documents, researching, developing questions, analyzing project information, or preparing draft work product. These tools may include services offered by OpenAI, Anthropic, or other vendors approved by GLK.

When GLK uses an AI-assisted tool in connection with a client engagement:

• GLK remains responsible for the services it agrees to provide and applies human professional review to final client deliverables;
• AI output may be incomplete or inaccurate and is treated as an aid, not as a substitute for professional judgment;
• GLK will limit submitted information to what it reasonably considers necessary for the task and will use approved account types, settings, and contractual safeguards appropriate to the information;
• GLK will not intentionally authorize a provider to use identifiable Client Materials to train a general-purpose public model unless the client gives express written consent; and
• GLK will not make a decision producing legal or similarly significant effects about an individual solely through automated processing unless GLK first provides any notice, choice, or safeguard required by law.

Do not upload passwords, payment-card numbers, government identification numbers, Social Security numbers, medical records, export-controlled or classified information, or other highly sensitive information unless GLK specifically requests it through an approved secure method. See our Document Upload and AI-Assisted Processing Notice.

4. Cookies and Similar Technologies

The Site may use cookies, pixels, tags, local storage, software development kits, and similar technologies. Depending on the features enabled, these technologies may support:

• strictly necessary functions, such as security, network management, form submission, checkout, consent records, and fraud prevention;
• analytics and performance, such as measuring traffic, navigation, and Site performance;
• functional services, such as scheduling, chat, video, maps, or remembered preferences; and
• advertising and social media, such as measuring campaigns, building audiences, or displaying more relevant advertising.

GLK may use providers such as Google Analytics, Meta Pixel, Hotjar, reCAPTCHA, scheduling platforms, chat providers, or comparable services if and when those features are enabled. A tool’s appearance in this Policy does not mean it is active at all times. The cookie-preference interface available on the Site will identify the nonessential categories currently in use.

Where required by law, GLK will request consent before using nonessential technologies. You may use the “Cookie Preferences” link in the Site footer to change available choices. Browser controls may also block or delete cookies, but doing so can affect Site functions.

Some browsers offer a “Do Not Track” signal, but there is no uniform industry response. GLK does not respond to that signal except where required by law. Where required and technically supported, we treat a recognized opt-out preference signal, such as Global Privacy Control, as a request to opt out of sale, sharing, or targeted advertising for the browser or device that sends the signal.

5. How We Disclose Personal Information

We may disclose personal information to:

• technology and operational providers that support hosting, data storage, security, communications, email delivery, scheduling, chat, document handling, analytics, customer management, and similar functions;
• payment and transaction providers, including Stripe, to process payments, prevent fraud, and support transaction administration;
• AI and document-processing providers when an approved tool is used as described above;
• professional advisors and contractors, such as attorneys, accountants, insurers, auditors, and consultants, subject to appropriate duties;
• project participants or persons you direct, including your employees, representatives, advisors, lenders, contractors, or other recipients you authorize;
• authorities and other parties for legal reasons, when reasonably necessary to comply with law or legal process; enforce an agreement; protect rights, safety, or property; prevent fraud or security harm; or establish, exercise, or defend legal claims; and
• transaction counterparties, in connection with a proposed or completed financing, merger, acquisition, sale, restructuring, bankruptcy, or transfer of assets, subject to appropriate confidentiality protections where practicable.

Service providers may process information only for authorized purposes under their contracts with GLK, except to the extent they independently determine purposes permitted by law.

Core providers may include Base44 for website hosting and application functions, Stripe for payment processing, and Resend for transactional email. When enabled, additional providers may support AI, analytics, advertising, heat mapping, security, scheduling, chat, customer management, email marketing, or SMS. GLK reviews and updates this Policy when a provider creates a materially different use of personal information.

6. Sale, Sharing, and Targeted Advertising

GLK does not sell personal information for money. If GLK enables advertising pixels, cross-context behavioral advertising, or similar technology that applicable law treats as a “sale,” “sharing,” or targeted advertising, GLK will provide the notice and opt-out mechanism required by that law. Use “Cookie Preferences” or any “Your Privacy Choices” link displayed on the Site to exercise available choices.

GLK does not knowingly sell or share personal information of individuals under 18 for cross-context behavioral advertising.

7. Retention

GLK uses the following baseline unless law, a project agreement, a legal hold, a dispute, security needs, or another documented business requirement calls for a different period:

• source files and uploads used to prepare a report are scheduled for deletion no later than 12 months after final delivery;
• final reports, signed agreements, transaction and accounting records, material engagement correspondence, and records needed to support or defend the work may be retained for seven years after final delivery or the end of the engagement; and
• cookie, security, analytics, and marketing records are retained for a period reasonably necessary for the relevant purpose and according to provider settings.

Deletion from active systems may not immediately remove data from encrypted backups, disaster-recovery systems, or immutable security logs. Data in those systems will be isolated from ordinary use and deleted or overwritten according to the applicable backup cycle. GLK may retain deidentified or aggregated information that no longer reasonably identifies an individual.

8. Security

GLK uses reasonable administrative, technical, and organizational safeguards designed for the nature of the information and the risks involved. No security measure, storage system, or transmission method is completely secure. You are responsible for using secure devices and networks, protecting account or link credentials, and notifying GLK promptly if you suspect unauthorized access involving information shared with us.

9. Your Privacy Rights

Depending on where you live and the law that applies, you may have the right to:

• know or access personal information and obtain a copy;
• correct inaccurate information;
• delete information;
• restrict or object to processing;
• receive certain information in a portable format;
• withdraw consent, without affecting earlier lawful processing;
• opt out of marketing, targeted advertising, sale, sharing, or certain profiling;
• ask for information about categories of data, sources, purposes, and recipients;
• appeal a refusal of a request; and
• complain to an applicable privacy or data-protection authority.

To make a request, email info@glkcmc.com with the subject line Privacy Request, or call (813) 406-3354. Describe the request and the relationship or transaction involved. We may request information reasonably necessary to verify identity, authority, and jurisdiction. An authorized agent may submit a request where permitted, but we may require proof of authority and direct verification with the individual. We will not unlawfully discriminate against you for exercising a privacy right.

These rights are subject to exceptions. For example, GLK may need to retain information to complete a transaction, comply with law, preserve evidence, protect security, or establish or defend legal claims. If we deny a request, we will provide an explanation and appeal instructions where required.

Marketing choices

You may unsubscribe from marketing email through the link in the message. For marketing text messages, reply STOP where that option is offered. Transactional or service communications may continue when necessary to administer an engagement. Consent to marketing is not a condition of purchasing a service.

10. Regional Privacy Information

A. European Economic Area, United Kingdom, and Switzerland

Where the GDPR, UK GDPR, or corresponding Swiss law applies, GLK processes personal information using the legal bases described in Section 2. You may have the rights described in Section 9, including a right to object to processing based on legitimate interests and to direct marketing.

GLK is located in the United States. When required, we use an approved transfer mechanism or derogation for transfers to the United States or another country, which may include contractual safeguards. You may contact us to ask about applicable safeguards. You may also lodge a complaint with the supervisory authority in the country where you live or work or where you believe a violation occurred.

GLK does not currently use solely automated decision-making that produces legal or similarly significant effects about individuals. If that changes, we will provide any additional notice and safeguards required by law.

B. California and other U.S. states

The categories described in Section 1 may include identifiers; customer records; commercial information; internet or electronic activity; approximate geolocation; professional or employment-related information; audio or visual information you submit; inferences; and sensitive personal information contained in materials you choose to provide. We use and disclose those categories for the purposes in Sections 2 and 5.

If a U.S. state privacy law applies to GLK and your information, you may exercise the rights that law grants through Section 9. GLK uses sensitive personal information only for authorized purposes, such as providing requested services, security, fraud prevention, legal compliance, or another purpose with required consent. GLK will provide a state-specific privacy-choice link if its practices trigger that requirement.

California residents may also request information about certain disclosures for direct-marketing purposes as provided by California law. The Site’s response to browser signals is described in Section 4.

C. Bahrain, United Arab Emirates, and Saudi Arabia

Where the privacy law of Bahrain, the United Arab Emirates, or Saudi Arabia applies, GLK will process personal information on an applicable lawful basis, provide required information, apply appropriate security, and support data-subject rights. Information may be transferred to and processed in the United States and other countries where GLK or its approved providers operate. GLK will use required contractual, consent-based, adequacy, or other lawful transfer safeguards. Because requirements can depend on the project, data type, and location of the parties, GLK may require a project-specific privacy or data-transfer addendum before accepting an engagement.

11. Children and Minors

The Site and GLK’s services are not directed to children. You must be at least 18 years old to purchase a service. GLK does not knowingly collect personal information online from a child under 13. If you believe a child has provided personal information, contact us so we can evaluate and delete it as required. Do not upload a minor’s information unless it is necessary for an authorized project, you have legal authority to provide it, and GLK has approved the transfer method.

12. Third-Party Sites and Services

The Site may link to or integrate third-party websites and services. Their privacy practices are governed by their own notices. GLK is not responsible for a third party’s independent privacy or security practices.

13. Changes to This Policy

We may update this Policy prospectively to reflect changes in law, technology, providers, or our practices. We will post the updated version and change the “Last Updated” date. If required, we will provide additional notice or obtain consent before a material change applies to previously collected information.

14. Contact GLK

GLK Construction Management & Consulting LLC
Lutz, Florida, United States
Email: info@glkcmc.com
Phone: (813) 406-3354
Website: www.glkcmc.com